Filter discovery reports

You can filter discovery reports by particular fields or by a Search Processing Language (SPL) search. Then, you can save that filter and return to the same view at a later time. To create a report filter, complete the following steps:

  1. Select Analytics then Exposure analytics and then Entity discovery.

  2. Select an Entity type and then select Show filter.

  3. Enter a name for your filter.
  4. Using the drop-down list, select the last seen time frame.
  5. Choose how you want to use and share the filter by selecting the appropriate Sharing check boxes.
    1. Select the App check box to make the filter app-specific and available for other users to use for discovery.
  6. If you want to filter by fields, select Field filtering and then configure your filter using the drop-down lists. Select the add icon ( add ) to add an additional field.
  7. If you want to filter by a search, select SPL search and then enter the SPL into the Search box. Or, enter a Where clause.
    Note: You can filter by fields or by SPL search, but not by both. If you enter a search to filter by, then switching to field filtering clears any SPL data you've input.
  8. (Optional) Select or deselect Use case sensitive search to tailor your search results.
  9. Select Apply to see the results.
  10. Select Save as new filter.

After you save a filter, you can return to that view by selecting it from the Filter drop-down list.